328535 - Crash when using feFuncA display: -moz-deck, a and path

Status: RESOLVED DUPLICATE of bug 328527

(Core :: SVG, defect)

Description

[Martijn Wargers (dead)]

See upcoming testcase which crashes current trunk builds on load.

I'm actually a big surprised this does crash Mozilla, as Bernd said in bug 322185, comment 9 that xul display types for svg tags should not work anymore.

Comment 1

[Martijn Wargers (dead)]

Attachment: testcase

Talkback ID: TB15587473Y

Comment 2

[Martijn Wargers (dead)]

Attachment: Backtrace from debug build

Also backtrace from the assertion:
###!!! ASSERTION: A box layout method was called but InitBoxMetrics was never ca
lled: 'metrics', file c:/mozilla/mozilla/layout/generic/nsFrame.cpp, line 6279

The crash:
#0  0x051df94c in nsBox::DoesNeedRecalc(nsSize const&) (this=0xf696810,
    aSize=@0x0) at c:/mozilla/mozilla/layout/xul/base/src/nsBox.cpp:646
#1  0x0506b99c in nsFrame::GetPrefSize(nsBoxLayoutState&, nsSize&) (
    this=0xf696810, aState=@0x22ece8, aSize=@0x22ebd8)
    at c:/mozilla/mozilla/layout/generic/nsFrame.cpp:5580
#2  0x051ea2c1 in nsStackLayout::GetPrefSize(nsIFrame*, nsBoxLayoutState&, nsSiz
e&) (this=0xe6b45c8, aBox=0xf6965fc, aState=@0x22ece8, aSize=@0x22ecb8)
    at c:/mozilla/mozilla/layout/xul/base/src/nsStackLayout.cpp:93
#3  0x051e33fc in nsBoxFrame::GetPrefSize(nsBoxLayoutState&, nsSize&) (
    this=0xf6965fc, aBoxLayoutState=@0x22ece8, aSize=@0x22ecb8)
    at c:/mozilla/mozilla/layout/xul/base/src/nsBoxFrame.cpp:906
etc.

Comment 3

[tor]

*** This bug has been marked as a duplicate of 328527 ***